Exception or Whitelist on Macs for Corporate Vuln Scanner?

So I've looked through my 12.1.4 SEPM and so far it's not obvious to me how I would exempt or whitelist our corporate vulnerability scanner for the Macs in our environment. The exemptions (via a specific subnet) work fine on the Windows side, but last week we got a popup on a few Macs that were being scanned...popups from our internal scanners are bad in a corporate environment, I need to figure out how to silence them.

Thanks for any suggestions, and I apologize in advance if I'm missing something simple.

-Mike